Bug 1002720

Summary: REST request without authentication throws NPE in business-central
Product: [Retired] JBoss BPMS Platform 6 Reporter: Jiri Svitak <jsvitak>
Component: Business CentralAssignee: Marco Rietveld <mrietvel>
Status: CLOSED DUPLICATE QA Contact: Marek Baluch <mbaluch>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 6.0.0CC: ibek, mbaluch, smcgowan
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-08-30 12:41:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
server.log none

Description Jiri Svitak 2013-08-29 19:05:14 UTC 
Created attachment 791940 [details]
server.log

REST request without authentication throws NPE in business-central.
JBWEB000236: Servlet.service() for servlet javax.ws.rs.core.Application threw exception: java.lang.NullPointerException

I think it will be better if the application would react in a better way than NPE and server error 500. More meaningful exception could be thrown in server log and HTTP status 401 Unauthorized could be returned.

To reproduce:
1.) Download BPMS 6 ER2 and just run it with ./standalone.sh with default configuration. (Optionally you can add user guest, but the bug message remains the same.)
2.) Send a GET request to http://localhost:8080/business-central/rest/task/query?potentialOwner=guest&language=en-UK (for example using Firefox's RESTClient).
Comment 1 Ivo Bek 2013-08-30 12:36:06 UTC 
This bug has been solving in BZ 986208.
Comment 2 Ivo Bek 2013-08-30 12:41:49 UTC 

*** This bug has been marked as a duplicate of bug 986208 ***